The Assessment page is the primary entry point for all Isora GRC users. A superuser can view the state of all current and completed assessments, launch surveys and even complete them. Other users only see portions of assessments that impact them.
Understanding the Assessment Page- New UI
In the new UI, all assessments (ongoing, published and completed) are first organized by methodology (target type) and then by series. Within each series, assessments are listed in tables.
Unit Assessments
You can click on any individual survey to view the survey page. If it’s a completed survey, it will take you to the report.
Application Assessments
As with unit assessments, you can click any individual assessment name to view that survey or report. With application assessments, the assessment consists of just one survey. There is a lot of information in the table, so you may need to widen your browser or use the scroll bar to see everything, like due dates and or completion dates.
Third-Party Vendor Product Assessments
Third-party vendor product assessments are usually all in one series. Within the series, they are broken out by product name. They are not grouped based on vendor name.
As with other types of assessments, to view an individual assessment, you can click on its entry in the table. If the assessment is complete, you can view the report. If its ongoing, clicking the name of the assessment will take you to an internal view of the survey. Usually these surveys aren’t filled out via the internal link. Typically you would email the external link so a non-user can access the survey and fill it out. You might use the internal link to acknowledge the survey.
Understanding the Assessment Page- Old UI
Active (ongoing) assessments are listed on the Open tab.
Depending on the target type, assessments will look somewhat different from each other. Presently, the only supported target types are Org Unit, App and Vendor.
Organizational Assessments
Organizational (org unit) assessments are structured around the concept of the Organizational Unit. When you create an assessment, you choose which OUs to include. A survey will be created for each one. The survey includes both unit-level questions and host categorization. If no sheets are assigned to an OU, then that survey will consist solely of unit-level questions, with an empty host categorization section. When you view the assessment on the assessment page, each assessment is broken down into the surveys it is comprised of.
App Assessments
An app assessment consists of a single survey for one single app. The survey has two parts- questions and classification. Unlike an organizational assessment, which may include many host classifications, the app survey just has one overall classification question, which applies to the app itself.
You can only view existing assessments or launch surveys with the assessment page. To create a new assessment or to edit an existing one, superusers should use the settings page.
Vendor Assessments
Vendor assessments are used to assess products provided by third-party vendors. They are associated with the organizational unit requesting the assessment, but can be made viewable by other OUs.
See also: How-To: Launch a Survey